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~ The MAILING DATE of this communication appears on the cover sheet with the correspondence address -- 
Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 

- Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1 )I3 Responsive to communication(s) filed on 12/29/03 . 
2a)l3 This action is FINAL. 2b)n This action is non-final. 

3) 0 Since this application is in condition for allowance except for fornial matters, prosecution as to the merits is 

closed in accordance with the practice under £xpa/te Quayle, 1935 CD. 11, 453 O.G. 213, 

Disposition of Claims 

4) 13 Claim(s) 1,3-10 and 29-32 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) 0 Clalm(s) is/are allowed. 

6) 1E Claim(s) 1,3-10,29-321 is/are rejected. 
?)□ Claim(s) is/are objected to. 

8) 0 Clalm(s) are subject to restriction and/or election requirement. 

Application Papers 

9) n The specification is objected to by the Examiner. 

10) 0 The drawing(s) filed on is/are: a)n accepted or b)n objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

11) 0 The oath or declaration is objected to by the Examiner. Note the attached Office Action orfonn PTO-152. 
Priority under 35 U.S.C. §§119 and 1 20 

12) 0 Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 

a)nAII b)n Some*c)n None of: 

1 .□ Certified copies of the priority documents have been received. 

2. n Certified copies of the priority documents have been received in Application No. . 

3. n Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 

13) 0 Acknowledgment is made of a claim for domestic priority under 35 U.S.C, § 1 19(e) (to a provisional application) 

since a specific reference was included in the first sentence of the specification or in an Application Data Sheet. 
37 CFR 1.78. 

a) □ The translation of the foreign language provisional application has been received. 

14) 0 Acknowledgment is made of a claim for domestic priority under 35 U.S.C. §§ 120 and/or 121 since a specific 

reference was included in the first sentence of the specification or in an Application Data Sheet. 37 CFR 1 .78. 



Attachment(s) 

1) □ Notice of References Cited (PTO-892) 

2) n Notice of Draftsperson's Patent Drawing Review (PTO-948) 

3) n Infornnation Disclosure Statement(s) (PTO-1449) Paper No(s) . 



4)m In 



Interview Summary (PTO-41 3) Paper No(s). 

5) LJ Notice of Informal Patent Application (PTO-1 52) 

6) □ Other: 
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DETAILED ACTION 



This action is in response to applicant's amendment filed 2/27/2004. 
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Claims 2,11-28 have been cancelled. 
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Claims 1,3-10.29-32 remain rejected. 



Claim Rejections - 35 USC § 102 



The text of those sections of Title 35, U.S. Code not Included in this action can be found 
in a prior Office action. 

4. Claim 31 remain rejected under 35 U.S.C. 102(e) as being anticipated by Win et aI.(US 
6,182,142). 

Claim 31 :Win disclose a computer readable medium where data structure comprising a 
policy statement expressing an implementation of an policy for a computer network, the 
statement conditioned on a group to which a user communicating with the network over a data 
path belongs wherein the policy statement is useable by the network to obtain an authorization 
parameter useable to grant or deny access to a resource on the network in accordance with the 
policy in (col.5, lines 28-61 ;col. 9, lines 53-62;col. 10, lines 57-67). 



The text of those sections of Title 35, U.S. Code not included in this action can be found 
in a prior Office action. 

5. Claims 1 ,3-4,6-8,29 are rejected under 35 U.S.C. 1 03(a) as being unpatentable over by 
Win etal.(US 6,182,142) in view of Vilhuber(US 6,470,453). 

Claims 1 ,29: Win patent disclose a method of enforcing a policy on a computer network 
where in response to an attempt by a user to access a resource on the network(col.3,lines 33- 



Claim Rejections - 35 USC § 103 
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38), determining a group to which the user belongs and based on the determined group, 
selecting an authorizing parameter in (col.5,lines 28-61). Win disclose the authorization 
parameter is usable to grant or deny access to resource in accordance with the policy in 
(col. 3, lines 33-44). Win disclose in (col.22, lines 49-53,65-67 and col.23,lines 1-12) where the 
link between servers are encrypted in order to ensure each transaction is secure and 
confidential. If secure link is not established between sen/ers than no transaction will be 
performed. This is a teaching of determining of characteristic link. For example, Win specifically 
discloses encrypted link in (fig.1#109, col.23,lines 26-29). Win does not specifically disclose 
authorization parameter is used by the network access server where NAS being interposed 
between the user and the resource. Vilhuber's patent teaches network access server where 
user is coupled to the computer network through NAS to grant or deny access to the resource in 
accordance with the policy in (fig. 1, #102, 103, 108 and coL6, lines 40-46). It would have been 
obvious to person of ordinary skill in the art to employ network access server,taught in Vilhuber 
with network access system disclosed in Win in order to block off or secure against 
unauthorized user from entering the network. Having NAS to perform security functions such as 
password checking, source checking and security parameter checking relieves a resource 
computer from conducting security procedures which can be time consuming but most 
importantly security maybe breached. Further, NAS serves a security wall so that before any 
user tries to contact the resource computer directly, user must go through NAS first before 
entering the network thereby adding another layer of security to the system. 

Claim 3: Win discloses selecting a profile based on the determined group,wherein the 
authorization parameter is contained in the profile in (col. 5, lines 28-46). 
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Claim 4: Win disclose the step of referencing a user object corresponding to the user, 
wherein the user object has a group attribute representative of the group in (col. 13, lines 55- 
67;col.14,lines1-3). 

Claim 6: Win disclose evaluating the policy statement based on the determined group ; 
and If the policy statement is evaluated to be true.selecting the authorization parameter in 
(col.5Jines 28-61). 

Claims 7-8: Neither Win nor Vilhuber specifically disclose specific time frame in which 
the user is permitted to access the network. Examiner takes Official notice that setting time 
frame to access the network is well known in the art. One of ordinary skill in the art would have 
been motivated to restrict usage time in order to manage its servers from being bogged down. 
Such that setting specific time frame for each group or users to access the network allows 
system to run smoothly avoiding system crash. 

6. Claim 5,9-10 are rejected under 35 U.S.C. 103(a) as being unpatentable over Win et 
al.(US 6,182,142) in view of Vilhuber(US 6,470,453) and further in view of Paxhia et al.(US 
6,493,749). 

Claims 5,9,10: Neither Win nor Vilhuber does specifically disclose adding an override 
attribute associated with the user to the profile. Paxhia disclose adding an override attribute 
associated with the user to the profile in (col.37, lines 2-28). It would have been obvious to 
person of ordinary skill in the art at the time invention was made to add an override attribute 
associated with the user to the profile as taught in Paxhia with user profile template disclosed in 
Win or Vilhuber because overriding features such as called telephone number can be used to 
callback or not callback to the user or to control access to the long distance resources of the 
network. 
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7 Claims 30,32 are rejected under 35 U.S.C. 103(a) as being unpatentable over Win et 
al.(US 6,182,142). 

Claims 30,32: Win discloses all the limitation. Win does not disclose user access over a 
dial up link using a called number. Official notice is taken that dial up link is well known in the 
art. One of ordinary skill in the art would have been motivated to use called number because 
with dial up link user can be called back and offers convenient and cost efficient to access 
remote site. 

Response to Applicant's Arguments 

8. Applicant has argued that Win does not disclose determining a characteristic of the link. 
In response: Examiner disagree, Win disclose in (col.22, lines 49-53,65-67 and col.23,lines 1-12) 
where the link between servers are encrypted in order to ensure each transaction is secure and 
confidential. If secure link is not established between servers than no transaction will be 
performed. This is a teaching of determining of characteristic link. For example, Win specifically 
discloses encrypted link in (fig.1#109, col.23,lines 26-29). Please see rejections above. 

Conclusion 

9. THIS ACTION IS MADE FINAL Applicant is reminded of the extension of time policy as 
set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1 .136(a) will be calculated from the mailing date of the advisory action. In no event, 
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however, will the statutory period for reply expire later than SIX MONTHS from the mailing date 
of this final action. 

1 0. Any inquiry conceming this communication or earlier communications from the examiner 
should be directed to Hosuk Song whose telephone number is 703-305-0042. The examiner 
can normally be reached on Tue-Fri from 6:00 am-4:00 pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Vu can be reached on 703-305-4393. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status Information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-dlrect.uspto.gov. Should you have questions on access to the Private 
PAIR system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 





